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Top Stories 

• The Royal Bank of Canada was sued by U.S. regulators April 2, over claims that the 
Toronto, Canada-based lender engaged in illegal futures trades worth hundreds of 
millions of dollars to garner tax benefits. - Bloomberg (See item 9) 

• Officials in Volusia County, Florida, said a single-engine plane crashed into a 
supermarket April 2, injuring five people, including three shoppers inside the store 
during the crash. - WESH 2 Orlando (See item 18 ) 

• A former Oikos University student accused of killing seven people at the university in 
Oakland, California, “does not appear to be remorseful at all,” the city’s police chief 
said April 3. - CNN (See item 26) 

• Students, public officials, and shoppers in Arlington, Texas, took cover April 3 as a 
large tornado touched ground, part of a huge complex of storms that was wreaking 
havoc across North Texas. The storms caused severe damage and delayed flights. - 
Fort Worth Star-Telegram (See item 40) 

• Dougherty County police found five explosive devices in a man’s car near the 
Georgia Power Dam in Albany, Georgia, April 1. - WALB 10 Albany (See item 47) 
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Energy Sector 



Current Electricity Sector Threat Alert Levels: Physical: LOW, Cyber: LOW 

Scale: LOW, GUARDED. ELEVATED, HIGH, SEVERE [Source: ISAC for the Electricity Sector (ES- 
ISAC) - [http://www.esisac.com1 



1. April 3, Bloomberg - (Texas) Tanker aground near Port Arthur, may leak 
fuel, filing shows. A tanker ran aground in the Sabine River near Port Arthur, 
Texas, and may leak fuel, according to a filing with the National Response 
Center. Two tug boats were on hand to help the Eagle Kinabalu, a double-hulled 
tanker registered in Singapore, which “suffered a steering casualty” April 2, the 
filing showed. U.S. companies must notify the response center if they release 
hazardous substances in excess of reportable quantities according to the 
Comprehensive Environmental Response, Compensation, and Liability Act, 
commonly known as Superfund. 

Source: http://www.bloomberg.com/news/2012-04-03/tanker-aground-near-port- 
arthur-may-leak-fuel-filing-shows.html 

2. April 3, UPI - (National) EPA holds off on oil, gas proposals. The U.S. 
Environmental Protection Agency (EPA) said it was delaying air pollution 
standards for hydraulic fracturing while it weighed thousands of public 
comments. The EPA had until April 3 to finalize air pollution standards for oil 
storage tanks, compressors, and natural gas wells developed by hydraulic 
fracturing, also known as fracking. It opted to delay the rules for 2 weeks. “EPA 
and parties have agreed to a two-week extension on a consent decree to issue final 
air emission rules for the oil and natural gas industry,” the agency said in a 
statement. “The agency requested the additional time to fully address the issues 
raised in the more than 156,000 public comments we received on the proposed 
rules.” The EPA said the new rules would decrease by more than 90 percent the 
emissions of volatile organic compounds from hydraulically fractured natural gas 
wells. Volatile organic compounds are tied to cancer and smog formation. 
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Source: http://www.upi.com/Business News/Energy-Resources/2012/04/03/EPA- 
holds-of-on-oil-gas-proposals/UPI-6347 1333454233/ 



3. April 2, WTOV 9 Steubenville - (Ohio) Copper thefts on rise in Carroll County, 
arrests made. A man accused of stealing thousands of dollars worth of copper in 
Carroll County, Ohio, was arrested April 2. Sheriff’s deputies said they caught the 
man stealing about 250 feet of copper wire from a property in Malvern, estimated 
to be worth over $1,500. The recent arrest was part of an ongoing investigation 
into copper thefts around the county, with recent thefts of over $14,000 worth of 
heavy duty copper wire from oil field industrial areas. 

Source: http://www.wtov9.com/news/news/copper-thefts-rise-carroll-county- 
arrests-made/nMHrb/ 



4. April 2, KWGN 2 Denver - (Colorado) Suncor fined $2.2 million for leaking 
cancer-causing chemical. The Colorado Department of Public Health and 
Environment (CDPHE) fined Suncor Energy $2.2 million for leaking unsafe 
amounts of benzene, a cancer-causing chemical, into the environment, KWGN 2 
Denver reported April 2. State inspectors discovered violations of state and 
federal requirements during an inspection of the Commerce City refinery in the 
summer of 2010. Among the state’s findings was Suncor’s failure to properly 
inspect and maintain equipment vital to the handling of benzene in process 
wastewater, CDPHE officials said. In December 2011, a massive cleanup effort 
was initiated after an oily black sludge containing benzene leaked into the Sand 
Creek waterway, which feeds the South Platte River. Suncor also was cited for 
failure to conduct periodic equipment inspections, implement an annual training 
program for employees, and complete the development of standard operating 
procedures for certain control equipment. 

Source: http://kwgn.com/2012/04/02/suncor-fined-2-2-million-for-leaking-cancer- 
causing-chemical/ 

5. April 2, Grand Forks Herald - (Minnesota) Crash spills 30,000 gallons of 
fuel. State officials were trying to determine the environmental threat posed by 
30,000 gallons of petroleum product spilled into a ditch March 3 1 near Plummer, 
Minnesota, the result of a rail accident. A semi-trailer struck a Canadian Pacific 
Railway train, killing the driver and releasing the petroleum product. A 
spokesman for the Minnesota Pollution Control Agency in Detroit Lakes said the 
liquid spilled into a ditch along the highway, spreading about a quarter of a mile. 
Pollution Control inspectors tested the liquid April 2 to determine the 
contaminants it contained and in what amount. The substance could be a pyrolysis 
gasoline, a product with a high benzene content that could make it a hazardous 
material and create a strong odor, according to the spokesman. Plummer was 
evacuated for 2 hours March 31, but the spokesman said the fumes were not a 
threat to residents. 

Source: http://www.grandforksherald.com/event/article/id/233647/ 

For another story, see item 40 
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Chemical Industry Sector 

6. April 3, Metro West Daily News - (Massachusetts) State DEP fines 
Framingham firm $30,000. The State of Massachusetts fined General Chemical 
Corp. nearly $30,000, following the firm’s recent announcement that it will close 
its southside Framingham, Massachusetts hazardous waste-handling facility, the 
Metro West Daily News reported April 3. The fine stems from various violations, 
including the facility’s failure to notify the Department of Environmental 
Protection (DEP) of a late-August 2011 fire, which was extinguished by 
employees. The General Chemical president signed an administrative consent 
order March 21 agreeing to a $29,575 fine, of which the DEP will suspend 
$5,000. Violations dating to September 2010 included a 4-by-4-foot oily waste 
spill that state inspectors watched a General Chemical forklift truck drive through, 
and the firm’s failure to inspect the facility and to set aside enough money to 
clean up a plume of contaminated groundwater surrounding the site. In the final 
version, the state ordered General Chemical to close its facility at 133 Leland 
Street, per the company’s March 2 letter that provided 45 days notice of the 
closure. The Board of Health at the time was scrutinizing the firm’s operations in 
light of waste -handling violations and public health concerns. 

Source: http://www.wickedlocal.com/framingham/news/xl2105841 1/State-DEP- 
fines -Framin gham-firm- 30-000#axzz Iqz5g9uxw 

7. April 2, Daily Republican Register - (Illinois) Anhydrous tank tips; highway 
briefly closed for cleanup. A Princeton, Indiana man was cited by local police 
after the anhydrous tank he was pulling turned over on Illinois Route 15 April 2. 
Police and firefighters responded after receiving a report that anhydrous ammonia 
had been spilled on the local highway. According to Mt. Carmel police, a truck 
was pulling the tank when it tipped over “and began leaking a small amount of 
anhydrous on the roadway.” Once the leak was stopped, a contractor provided the 
equipment needed to turn the tank and trailer back onto its wheels. Both lanes of 
traffic were closed for 20 minutes while the spill was addressed. 

Source: http://tristate-media.com/drr/news/local news/article 50895666-7d09- 
Ilel-b059-001a4bcf887a.html 

T Return to top i 

Nuclear Reactors, Materials and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 
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Nothing to report 
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Defense Industrial Base Sector 

8. April 2, U.S. Department of Labor - (Maine) US Labor Department’s OSHA 
cites Bath Iron Works for safety violations. According to an April 2 news 
release, the U.S. Department of Labor’s Occupational Safety and Health 
Administration (OSHA) cited Bath Iron Works, a General Dynamics company, 
for alleged repeat and serious violations of workplace safety standards at its 
shipyard in Bath, Maine. The shipbuilder faces a total of $171,300 in proposed 
fines following a safety inspection by OSHA’s Augusta Area Office. The 
inspection, conducted under OSHA’s Site-Specific Targeting Program and a local 
emphasis program focusing on hazards in ship- and boat-building and repair, 
identified a variety of fall, mechanical, and electrical hazards. These included 
workers exposed to falls from a lack of fall protection, as well as unguarded roof 
edges and floor holes and openings; tripping and fall hazards from walkways 
obstructed by materials, equipment, hoses, and service cords; an unqualified 
employee operating an overhead crane; defective and uninspected lifting slings; 
uninspected lift trucks; unguarded electrical equipment; exposed and damaged 
electrical sheathing; and the improper storage of flammable chemicals. 

Source: 

http://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RE 
LEASES &p id=22095 

T Return to top i 

Banking and Finance Sector 

9. April 3, Bloomberg - (National; International) RBC sued by U.S. regulators 
over wash trades. Royal Bank of Canada (RBC) was sued April 2 by U.S. 
regulators over claims that the Toronto, Canada-based lender engaged in illegal 
futures trades worth hundreds of millions of dollars to gamer tax benefits tied to 
equities. Canada’s biggest bank made false and misleading statements about 
“wash trades” from 2007 to 2010 in which affiliates traded among themselves in a 
way that undermined competition and price discovery on the OneChicago LLC 
exchange, the Commodity Futures Trading Commission (CFTC) said in a 
complaint filed in a New York federal court. Royal Bank enlisted affiliates to help 
carry out hundreds of futures transactions that were done off-exchange and then 
reported to OneChicago as block trades between independent affiliates, according 
to the CFTC. The trades, which resulted in Royal Bank not having a financial 
position in a market, were conducted for Canadian tax benefits tied to holding 
certain stocks, the CFTC said. The transactions, involving single-stock futures 
and narrow-based indexes, were used to hedge the risk of holding the equities, 
according to the statement. Between 2006 and 2010, the narrow-based index 
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trades between a Toronto-based bank account and RBC Europe Ltd., a London- 
based bank subsidiary, represented all of the narrow-based index volume on 
OneChicago, the CLTC said in the complaint. Senior members of the bank’s 
central funding group determined the prices and contracts traded. Lrom 2005 to 
2010, RBC concealed material information and made false statements about the 
trades to CME Group Inc., which had regulatory oversight of the exchange, 
according to the CLTC. RBC’s responses to CME questions about the trades 
“concealed information concerning the central role” of the central funding group 
and the bank’s single-stock futures trades, CLTC said. The CLTC is seeking 
monetary penalties and an injunction against further violations, the agency said. 
Source: http://www.businessweek.com/news/2012-04-02/rbc-sued-by-u-dot-s- 
dot-regulators-over-wash-trades-seeking-tax-benefit 

10. April 3, Help Net Security - (International) Fake US Airways emails lead to 
Zeus variant. A US Airways-themed spam campaign aiming at infecting users 
with a variant of the Zeus banking trojan has been hitting inboxes for the last 2 
weeks, according to a Kaspersky Lab researcher. This particular spam e-mail 
purportedly contains the confirmation code and the online reservation details 
needed for the users to confirm their flight reservation. However, the offered links 
take users to one of a number of compromised domains containing malicious 
javascripts that perform a number of redirections and finally land the victims on a 
domain hosting the BlackHole exploit kit. Once the kit exploits a vulnerability in 
Java, Llash Player, or Adobe Reader, a downloader that ultimately connects to a 
command and control server and downloads and runs the GameOver Zeus variant 
is installed on the machine. “At all the stages of this attack, every object — 
domains, links to javascripts, files with exploits, the downloader and Zeus — was 
frequently replaced with a new one,” the researcher said. “The domains remained 
‘alive’ for nearly 12 hours, while the Zeus samples were replaced more often.” 
Given that the exploits, downloaders, and Zeus modifications used by the 
cybercriminals in this attack were detected mostly by Russian, U.S., Italian, 
German, and Indian Kaspersky users, the researcher speculates the spam 
campaign is not the only method used by these cyber crooks to spread Zeus. 
Source: http://www.net-security.org/malware news.php?id=2054&utm 

11. April 2, Citybizlist Baltimore - (Maryland) Maryland attorney pleads guilty in 
$14M construction investment scheme. An attorney pleaded guilty April 2 in 
Maryland, to conspiring to commit wire fraud arising from an investment fraud 
scheme. According to his plea agreement, the attorney and his co-conspirators 
targeted individuals seeking investment opportunities or commercial real estate 
development lending in Maryland and elsewhere, including a Bowie, Maryland 
hotel project. Victim investors were instructed that in order to obtain loans for 
commercial real estate projects, they were required to deposit large sums of 
money in an escrow bank account to show “liquidity.” All of the escrow 
agreements used to defraud the investors provided that no person other than the 
victims had the ability to remove the escrowed funds without permission. Lrom at 
least August 2009 to August 2011, the attorney and his co-conspirators defrauded 
investors by removing the funds. Typically, within 1 or 2 weeks after the deposit, 
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they withdrew the victim’s funds to pay their business and personal debts or to 
make “lulling” payments to other investors. They attempted to cover up the fraud 
by issuing false verifications of deposits and false bank statements regarding the 
amount of escrowed funds; falsely representing in e-mails and by phone the 
balance of escrow funds and the date when the investors’ money would be 
returned; and returning part of the victims’ investments using funds from other 
investors. They improperly obtained funds from investor victims in excess of $14 
million. 

Source: http://baltimore.citybizlist.eom/l/201 2/4/2/Maryland- Attorney- Pleads- 
Guilty-in-14M-Construction-Investment-Scheme.aspx 

12. April 2, KLEW 3 Lewiston - (Idaho) Nearly 300 people fall victim to credit 
card fraud. Nearly 300 people in and around the Orofino, Idaho area have fallen 
victim to credit card fraud since the first week of February, KLEW 3 Lewiston 
reported April 2. According to the Orofino police chief, the victims have reported 
fraudulent usage, or attempted usage, of their credit card accounts with 
unauthorized purchase attempts. The Orofino Police Department has been 
working with a number of banking institutions and the U.S. Secret Service to 
determine the source of fraud. Together, the three departments determined 
Orofino’ s Glenwood IGA was the common point of purchase for the 
compromised accounts. The police chief said IGA has been fully cooperating with 
law enforcement to determine the compromise. 

Source: http://www.klewtv.com/news/local/Nearlv-300-people-fall-victim-to- 
credit-card- fraud— 145859385 .html 



13. April 2, U.S. Department of Justice - (New Hampshire; Massachusetts) New 
Hampshire and Massachusetts residents convicted for promoting and using 
tax defier schemes. A federal jury in Worcester, Massachusetts, convicted three 
defendants for conspiracies to defraud the United States through the promotion 
and use of multiple tax fraud schemes, the Justice Department and the Internal 
Revenue Service (IRS) announced April 2. According to the evidence presented at 
trial, the three promoted a payroll scheme to employers and individuals who 
wanted to avoid payment of employer payroll taxes and individual payroll taxes. 
Approximately 150 individuals subscribed to the payroll scheme and in excess of 
$2.5 million in unreported wages and compensation were paid through the 
system. The evidence at trial also proved two of the defendants conspired to 
defraud the United States by promoting and operating an “underground 
warehouse banking” scheme which helped subscribers conceal income and assets 
from the IRS. As part of the banking scheme, the defendants maintained accounts 
at several banks and used the accounts to deposit and commingle business receipts 
and other funds received from subscribers in order to mask the true ownership of 
the funds. According to evidence presented at trial, more than $28 million in 
deposits were made into the various bank accounts used in the scheme. 

Source: http://www.iustice.gov/tax/2012/txdvl2418.htm 

14. April 2, KIVI 6 Boise - (Idaho) Boise transient arrested for making fake money 
in Boise hotel room. Police in Boise, Idaho, were called April 1 by the clerk of a 
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motel. Motel employees told officers they were concerned about the welfare of a 
guest who missed the checkout time and appeared unresponsive when a motel 
employee entered to check the room. Boise Police knocked and announced 
themselves, and a man answered the door. Inside the room, officers saw in plain 
sight a printer and a trash can with what looked like paper copies of money. Also, 
the motel clerk previously told officers they were holding what appeared to be a 
fake $5 bill the man used to pay for the room. Detectives with the Boise Police 
Financial Crimes unit and the U.S. Secret Service were called to the scene. The 
motel guest was found to be using the room and printer to manufacture counterfeit 
U.S. currency. It appeared to officers the suspect was making the counterfeit bills, 
mainly in the denominations of $5 and $20, for the last 2 to 3 days. Officers also 
found the fake bills were recently passed at two nearby convenience stores by the 
suspect. The suspect was booked on the charge of forgery. 

Source: http://www.kivitv.com/news/local/145813915.html 



T Return to top ] 

Transportation Sector 

15. April 3, St. Louis Post-Dispatch - (Missouri) Train leaking diesel fuel for miles 
stops in Maplewood for cleanup. A hazardous materials team was putting a 
chemical retardant along Union Pacific railroad tracks after a train leaked diesel 
fuel for miles April 3 as it passed through several St. Louis County municipalities. 
No one was injured in the fuel spill, and it never caught fire, said a Maplewood 
fire captain. The fuel presumably had been leaking for miles, through towns that 
included Kirkwood and Webster Groves, although the fire captain said he did not 
know how far back the fuel spill began. The fuel was leaking from a rear engine. 
Union Pacific called a HAZMAT team to clean up the spill, and they managed to 
stop the leak. 

Source: http://www.stltodav.com/news/local/crime-and-courts/train-leaking- 
diesel-fuel-for-miles-stops-in-maplewood-for/article fc660c8e-7d88-llel-b2e8- 
Q01a4bcf6878.html 



For more stories, see items 1, 5, 7, 18, and 40 
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Postal and Shipping Sector 

16. April 3, Associated Press - (New York) 3 accused of damaging Long Island 
mailboxes. Police in Long Island, New York, arrested three men accused of 
damaging three mailboxes with fireworks. Nassau County police said all three 
incidents occurred in Elmont April 3. The owner told police he heard an explosion 
outside his house and discovered that his detached mailbox was destroyed along 
with the mail inside. All three defendants are charged with criminal mischief. 
Source: 

http://online.wsi.com/article/APfcf2e488bd554f0facda80be451a0631.html 
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17. April 2, WCVB 5 Boston - (Massachusetts) Suspicious powder found in nearly 
a dozen mailboxes. A possible April Fool’s joke had several state and local 
authorities responding to nearly a dozen calls of white powder in mailboxes in 
Hubbardston, Massachusetts, April 1. Police said they received a 9-1-1 call from a 
resident who claimed to have a bag of white powder in her mailbox. When 
officers arrived and began to inspect, more than a dozen other mailboxes on the 
street were discovered with the same contents. The Massachusetts State 
HAZMAT Team arrived and carefully secured the bags. It was later determined 
that the substance inside was harmless. 

Source: http://www.thebostonchannel.eom/r/30812974/detail.html 



[ Return to top ] 

Agriculture and Food Sector 

18. April 3, WESH 2 Orlando - (Florida) 5 hurt when plane crashes into DeLand 
Publix. Police and sheriffs officials in Volusia County, Florida, said a single- 
engine plane crashed into a Publix in DeLand April 2. The crash occurred at the 
Northgate Shopping Center, a half-mile from the DeLand Municipal Airport. 
DeLand fire officials said five people were injured, including three shoppers and 
the two people on board the plane. Two shoppers were taken to the hospital and 
were expected to be released April 2. The third shopper suffered bums and was 
taken to a different hospital, where he was listed in stable condition. The pilot and 
passenger on board the plane also suffered burns and were taken to the hospital. 
The pilot of a medical transport helicopter used at the scene said the plane was an 
amphibious experimental aircraft that took off from DeLand and suffered engine 
failure. Witnesses at the scene described seeing the plane sputter, hit the building, 
and burst into flames. The plane crashed in the back of the store, near the meat 
department, but those up front said they could still feel the heat from the fire. The 
National Transportation Safety Board and the Federal Aviation Administration 
were notified about the crash. 

Source: http://www.wesh.eom/r/30820882/detail.html 

19. April 3, Food Safety News - (International) Quebec sausage recalled due to 
Listeria risk. The Canadian Food Inspection Agency (CFIA) is warning the 
public not to consume certain La Vecchia Fattoria brand Cacciatore Dry Cured 
Sausages because they may be contaminated with Listeria monocytogenes, Food 
Safety News reported April 3. The sausages were distributed in Quebec. The 
CFIA is working with the manufacturer to have the affected product removed 
from the marketplace. 

Source: http://www.foodsafetynews.com/2012/04/quebec-sausage-mav-be- 
listeria-risk/ 



20. April 3, WHPT 21 Harrisburg - (Pennsylvania) Salmonella found in raw milk 
products at Kutztown dairy farm. Pennsylvania’s Department of Agriculture 
and Department of Health April 3 advised consumers and retailers who purchased 
raw milk and raw milk cheese from a dairy in Kutztown, to discard or return the 
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products immediately. April 1, an independent lab confirmed the products tested 
positive for Salmonella. It was found in raw milk sold in a plastic bottle and raw 
milk cheese with a date code of March 25. Raw milk and raw milk cheese sales 
have been suspended at the facility until additional testing is completed. Before 
sales can resume, samples must be free of Salmonella and other pathogens and the 
farm must also pass a state inspection. 

Source: http://www.whptv.com/news/local/storv/Salmonella-found-in-raw-milk- 
products-at-Kutztown/WSioz-rMPUeB6fC8LFTp-A.cspx 

21. April 2, U.S. Department of Labor - (Pennsylvania) US Labor Department’s 
OSHA cites Pittsburgh chocolate company for 16 workplace safety violations, 
proposes more than $84,000 in fines. The U.S. Department of Labor’s 
Occupational Safety and Health Administration (OSHA) cited Tsudis Chocolate 
Co. for 2 repeat and 14 serious safety violations at its Pittsburgh candy 
manufacturing facility, the U.S. Department of Labor reported April 2. OSHA 
opened an inspection after a worker sustained head injuries while setting up 
operations on a machine that started up inadvertently. The repeat violations 
involve failing to provide workers with adequate training in safe energy control 
and electrical work practices. Similar violations were cited in October 2010. The 
serious violations involve deficient energy control procedures, improper storage 
of materials, inadequate machine guarding, electrical hazards, and failing to 
provide proper exits/means of egress. Proposed penalties total $84,150. 

Source: 

http://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RE 
LEASES&p id=22092 

22. March 29, US Food Safety - (California) Vagabundo Paletas candy recall. The 
California Department of Public Health (CDPH) warned consumers not to eat 
Vagabundo Paletas candy imported from Mexico after tests conducted by CDPH 
found unacceptable levels of lead, US Food Safety reported March 29. Recent 
chemical analysis of this candy by CDPH’s Food and Drug Laboratory 
determined it contained as much as 0.61 parts per million of lead. California 
considers candies with lead levels in excess of 0.10 parts per million to be 
contaminated. Vagabundo Paletas candy is imported and distributed by Crown 
Wholesale, in Paramount, California, which initiated a recall. CDPH is currently 
working with the distributor to ensure that the contaminated candies are removed 
from the market place. 

Source: http://www.usfoodsafety.com/zrl20060.aspx 

For another story, see item 46 
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Water Sector 



23. April 3, Eugene Register Guard - (Oregon) Heavy rainfall causes sewage 
spills. A sewer line backed up April 2 in Springfield, Oregon, pushing an 
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unknown amount of sewage out of a manhole and into gutters. Springfield Public 
Works crews cleaned the area and were tracing further downstream for 
contamination, the director of Eugene’s wastewater division said. In Sutherlin, the 
city’s sewage treatment plant could not handle the water from the recent heavy 
rains that filled sewer pipes and flowed into the facility. The extra water led to an 
overflow of sewage into Sutherlin Creek, city officials said. The state Department 
of Environmental Quality and state emergency response experts were notified of 
the spill. 

Source: http://www.registerguard.com/web/newslocalnews/27859402-41/sewage- 
sewer-overflows-plant-treatment.html.csp 

24. April 3, KTLA 5 Los Angeles - (California) 6 water main breaks flood streets in 
Fairfax District. California’s Los Angeles Department of Water and Power 
(LADWP) responded to at least six water main breaks in the Fairfax District April 
3. Approximately 130 customers were experiencing service interruptions or 
lowered pressure due to the leaks, the LADWP said. An 8-inch water main broke 
at 3rd Street and Fairfax Avenue causing the pavement to buckle. Another break 
caused flooding that shut down Vista between Beverly Boulevard and Oakwood. 
In Hollywood, a 6-inch water main ruptured and caused the some pavement to 
buckle, according to reports from the scene. The LADWP stated account that 
crews were working to get the breaks fixed as quickly as possible. It also said the 
main breaks followed changes made to the water system served by the Fran kl in 
Canyon Reservoir as part of an inspection April 2. 

Source: http://www.ktla.com/news/landing/ktla-west-hollywood-water-main- 
break,0,5 157 137 .story 



For another story, see item 4 
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Public Health and Healthcare Sector 



25. April 3, Associated Press - (Texas) Ex-nurse kills patients with bleach; 
sentenced to life in prison. A former Texas nurse was convicted of capital 
murder March 30 after killing five dialysis patients by injecting them with bleach 
at a clinic run by Denver-based health care giant DaVita Inc. in Lufkin, Texas. 
The jurors recommended a life sentence with no chance of parole April 2. She 
also received three 20- year terms for aggravated assault in the cases of 5 other 
patients who were deliberately injured at the facility. The nurse was fired in April 
2008 after a rash of illnesses and deaths at the clinic. 

Source: http://www.wctil2.com/news/30823162/detail.html 

26. April 2, CNN - (Wisconsin) Homemade bomb causes fire outside Planned 
Parenthood clinic. A Planned Parenthood clinic in Wisconsin was closed after a 
homemade bomb was placed outside the building April 1, the state organization 
said. The explosive device caused a small fire by the time Grand Chute fire 
officials arrived, the president and CEO of Planned Parenthood of Wisconsin said 
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in a statement. No patients or staff members were at the health care center at the 
time. Police in Grand Chute are investigating the incident. 

Source: http://edition.cnn.com/2012/04/Q2/iustice/wisconsin-planned- 
parenthood/index .html 

27. April 2, Associated Press - (Mississippi) Additional charges likely in clinic 
case. Federal prosecutors said more charges are likely in the case of three people 
charged in an alleged heath care scheme involving diluted cancer drugs and old 
syringes at a now-closed Mississippi clinic, the Associated Press reported April 2. 
The charges include conspiracy, fraud, and witness tampering related to Rose 
Cancer Center in Summit. Authorities said the clinic made millions of dollars 
while diluting drugs and billing Medicaid, Medicare, and insurance companies for 
more chemotherapy than patients received. The clinic also used old syringes on 
multiple patients while billing for new ones, court records said. The clinic billed 
Medicaid and Medicare for about $15.1 million during the alleged scheme. The 
state Department of Health closed the Rose Cancer Center in July 2011 because 
of “unsafe infection control practices” and tested hundreds of patients for viral 
diseases like HIV over concerns about dirty needles after 1 1 patients went to 
hospitals with the same bacterial infection. 

Source: 

http://www.clarionledger.com/article/20120403/NEWS/20403Q331/Additional- 

charges-likely-clinic-case?odyssey=modlnewswellltextlHomels 

For another story, see item 40 
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Government Facilities Sector 



28. April 3, Pittsburgh Tribune -Review - (Pennsylvania) Bomb threat empties Pitt 
dorms at 4 a.m. University of Pittsburgh officials evacuated the Litchfield 
Towers residence halls on the Oakland campus in Pittsburgh April 3 for a bomb 
threat, the 10th threat made at a university building since mid-February. Pitt is 
offering a $50,000 reward for information leading to the arrest and conviction of 
anyone responsible for the rash of bomb threats on the Oakland campus. The 
reward, previously $10,000, was increased April 2 after two more bomb threats 
forced authorities to evacuate David Lawrence Hall and the Cathedral of 
Learning. Students were allowed back into the Litchfield Towers after couple of 
hours. 

Source: 

http://www.pittsburghlive.eom/x/pittsburghtrib/news/breaking/s 789612.html 

29. April 3, CNN - (California) Police: California shooting suspect shows no 
remorse. The man accused of killing seven people execution- style at a small 
religious college in Oakland, California, “does not appear to be remorseful at all,” 
the city’s police chief said April 3. The former student, told authorities he was 
upset at being expelled from Oikos University, the police chief said. He was upset 
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with some administrators and students and said he had been “picked on” and 
“wasn’t treated fairly,” he said. Investigators believe the suspect walked into the 
single-story building housing the university April 2, took a receptionist hostage, 
and went looking for a particular female administrator, who was not there. After 
the shooting, the man left the classroom, reloaded his semi-automatic weapon, 
and returned, firing into several classrooms, the police chief said. He ended his 
rampage by driving off in a victim’s car. In all, seven people were killed and three 
were wounded. “This happened within minutes,” the police chief said. “We don’t 
think the victims had any opportunity to resist, any opportunity to surrender.” The 
suspect was arrested a short time after the shooting, when he surrendered to police 
at a grocery store in the Oakland suburb of Alameda, police said. Police expect to 
present the case to the district attorney for possible charges later in the week of 
April 2. 

Source: http://www.cnn.com/2012/04/03/us/califomia-shooting/ 

30. April 2, Prescott Daily Courier -( Arizona) 7 hospitalized in Prescott Valley 
HAZMAT incident. Seven Prescott Valley, Arizona students and staff were 
taken to Yavapai Regional Medical Center April 2 after a chemical smell 
apparently sickened them and led to a partial evacuation. Students were evacuated 
April 2 from Prescott Valley Charter School after students and staff smelled a 
“strong odor in the boys’ bathroom,” said a Central Yavapai fire captain. 
Firefighters from Central Yavapai Fire District, Prescott Fire, Prescott Valley 
Police, and Life Line Ambulance responded to a call about a chemical odor at the 
school. As the hazardous materials team used their monitors to determine there 
were no chemicals present and that oxygen levels were all right, the students were 
moved to another school building. After the building was aired out for a couple of 
hours, students and staff returned to their rooms and classes continued, he said. 
Source: 

http://www.dcourier.com/main.asp?SectionID=l&SubSectionID=l&ArticleID=l 

05030 



31 .April 2, Dayton Daily News - (Ohio) Bomb squad called to UD 

dormitory. About 100 University of Dayton (UD) students were evacuated from 
a campus residence hall while university police investigated a suspicious package 
that was found in the building April 2. UD police said the package was found on 
the ground floor of the Virginia W. Kettering Hall in Dayton, Ohio. The Dayton 
Bomb Squad was called and the package was removed from the university about 
2 hours later. Authorities revealed little about the package itself. The executive 
director of public safety and UD’s chief of police, said the package was wrapped 
in duct tape and placed in a location near mechanical rooms and meeting areas — 
places packages are not normally delivered. The fear was that the device may be 
explosive. 

Source: http://www.daytondailynews.com/news/dayton-news/bomb-squad-called- 
to-ud-dormitory- 1 354040.html 



For another story, see item 40 
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Emergency Services Sector 

32. April 2, WUSA 9 Washington D.C. - (Maryland) Driver loses control of fire 
training SUV, hits instructor. A Maryland Fire Rescue Institute training 
instructor suffered critical injuries during a training exercise April 1, according to 
Charles County Sheriffs Office authorities. A driver practicing maneuvers with a 
fire department training SUV on a cone course apparently lost control and hit the 
instructor. Authorities are investigating the incident. 

Source: http://www.wusa9.com/news/article/199914/158/Driver-Loses-Control- 
Of-Fire-Trainin g-SUV -Hits-Instructor 

33. April 1, KTLA 5 Los Angeles - (California) Calif, man arrested for 
impersonating a firefighter. A man is facing charges after he allegedly used real 
but stolen law enforcement badges to lure and then rob women at a nightclub in 
San Bernardino, California, KTLA 5 Los Angeles reported April 1. He was 
known to frequent nightclubs and tell women he worked for a fire and police 
department in Riverside County. He reportedly showed them a California 
Department of Forestry badge that he unlawfully obtained. On one occasion in 
February, he allegedly was able to convince a woman that he was a firefighter and 
then took her to a local motel where he stole items from her purse while she slept. 
He also reportedly used her credit card shortly after leaving the motel. He is also 
accused of another incident March 16 where he forced himself into a woman’s car 
outside the nightclub and would not exit or let her in until after he stole her wallet. 
He was arrested March 27 after sheriff’s officials were able to obtain a warrant to 
search his home. Evidence found included two real law enforcement badges and 
property belonging to the victims. 

Source: http://www.ktla.com/ncws/landing/ktla-indio-man-impcrsonating- 
firefighter,0,1983912.story 
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Information Technology Sector 

34. April 3, IDG News Service - (International) Mozilla adds vulnerable Java plug- 
in versions to Firefox blocklist. Mozilla blacklisted unpatched versions of the 
Java plug-in from Firefox on Windows in order to protect its users from attacks 
that exploit known vulnerabilities in those versions. Mozilla can add extensions or 
plug-ins to the Firefox add-on blocklist if they cause significant security or 
performance issues. Firefox installations automatically query the blocklist and 
notify users before disabling the targeted add-ons. “The February 2012 update to 
the Java Development Kit (JDK) and Java Runtime Environment (JRE) included 
a patch to correct a critical vulnerability that can permit the loading of arbitrary 
code on an end-user’s computer,” Mozilla’s channel manager said April 2. “This 
vulnerability — present in the older versions of the JDK and JRE — is actively 
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being exploited, and is a potential risk to users,” he said. “To mitigate this risk, 
we have added affected versions of the Java plugin for Windows (Version 6 
Update 30 and below as well as Version 7 Update 2 and below) to Firefox’s 
blocklist.” He did not specify the vulnerability being actively exploited, but 
security companies have warned during the past several weeks that exploits for 
the CVE-2010-0507 Java vulnerability were being used in widespread attacks and 
have been incorporated into the popular Blackhole exploit toolkit. 

Source: 

http://www.computerworld.eom/s/article/9225800/Mozilla adds vulnerable Java 
plug in versions to Firefox blocklist?source=rss security&utm source=feedb 
umer&utm medium=feed&utm campaign=Feed:+computerworld/s/feed/topic/17 
+(Computerworld+Security+News)&utm 

35. April 3, IDG News Service - (International) Adobe releases open source 
malware classification tool. Adobe Systems released a malware classification 
tool in order to help security incident first responders, malware analysts, and 
security researchers more easily identify malicious binary files. The Adobe 
Malware Classifier tool uses machine learning algorithms to classify Windows 
executable and dynamic link library files as clean, malicious, or unknown, a 
Adobe security engineer said. When run, the tool extracts seven key attributes 
from every analyzed binary file and compares them to data obtained by running 
the J48, J48 Graft, PART, and Ridor machine-learning algorithms on a set of 
100,000 malicious programs and 16,000 clean ones, he said. 

Source: 

http://www.computerworld.eom/s/article/9225778/Adobe releases open source 
malware_classification_tool 



36. April 3, The Register - (International) Facebook logins easily slurped from iOS, 
Android kit. Facebook’ s iOS and Android clients do not encrypt users’ logon 
credentials, leaving them in a folder accessible to other apps or USB connections. 
A rogue application, or 2 minutes with a USB connection, is all that is needed to 
steal the temporary credentials from either device. In the case of iOS, someone 
can even take the data from a backup, enabling the hacker to attach to a Facebook 
account and access applications. This exploit comes from a reader of The 
Register, who came across the file and tested it to see if it was easy enough to 
pretend to be someone else. After developing a proof-of-concept, which lifted 
“several thousand” IDs, the reader deleted the collected data and reported the 
matter to Facebook. It appears Facebook is already aware of the problem and 
working on a fix — though it will not say how long it is going to take or what 
users should do in the meantime. 

Source: http://www.theregister.co.uk/2012/04/03/facebook security weak logon/ 

37. April 2, V3.co.uk - (International) Anonymous and Lulzec hackers evolving to 
target corporate data to cause financial pain. Hacker groups Anonymous and 
LulzSec are changing tactics to target firms’ corporate data in order to hurt them 
financially, rather than cause embarrassment by affecting Web sites, according to 
new research from security firm Imperva. In its latest Hacker Intelligence 
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Initiative report, Imperva researchers said they saw a marked change in 
hacktivists’ behavior, with groups moving away from defacing Web sites or 
knocking them offline to stealing data. Specifically, Imperva researchers reported 
discovering that 21 percent of all recorded incidents from June to November 2011 
saw hackers mounting local and remote file inclusion (RFI/LFI) attacks. The 
statistic was widely attributed to hacktivists, such as the Anonymous collective 
and LulzSec group. A form of attack that targets PHP coding, the use of RFI/LFI 
techniques allows hackers to steal data by manipulating the company’s Web 
server, and indicates a step away from their usual tendency to target companies’ 
Web sites with distributed denial-of-service assaults. 

Source: http://www.v3.co.uk/v3-uk/news/2165469/anonymous-lulzec-hackers- 
evolving-target-corporate-cause-financial-pain 

38. April 2, SecurityWeek - (International) Dozens of Alexa top 25,000 domains 
serving malware to millions, firm says. An analysis of the Alexa top 25,000 
most popular domains revealed 58 were serving malicious content during the 
month of February — translating to more than 10.5 million users being targeted 
by malware, according to research by Barracuda Networks. The firm also found 
that on average, 2 of the Alexa top 25,000 domains serve malicious content each 
day. In addition, Alexa top-ranked domains served malicious content 23 of the 29 
days in February, underscoring that the problem is persistent, Barracuda Networks 
argued. Almost all of the sites hitting visitors with malicious content were a year 
or more old, and more than half of the sites were older than 5 years. That means 
attackers were specifically utilizing well-established, long-lived sites for their 
drive-by download operations. 

Source: http://www.securityweek.com/dozens-alexa-top-25000-domains-serving- 
malware-millions-firm-says 



For another story, see item 10 

Internet Alert Dashboard 

To report cyber infrastructure incidents or to request information, please contact US-CERT at sos@us- 
cen.gov or visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 

39. April 2, WMBD 31 Peoria - (Illinois) Cell tower outage has Bradley students 
searching for connection. Sprint customers on Bradley University’s campus in 
Peoria, Illinois, were having trouble making phone calls April 2. A cell tower 
outage in Peoria was causing Sprint customers to lose service. A Bradley 
spokesperson said the problem started the week of March 26. He said Sprint told 
him the problem is affecting various areas across central Illinois. A Bradley 
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spokesperson said that Sprint has told him the tower would be fixed April 6. 
Source: http://centralillinoisproud.com/fulltext7nxd id=237632 
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Commercial Facilities Sector 



40. April 3, Fort Worth Star-Telegram - (Texas) Students, public officials, 

shoppers take cover as tornado touches down in Arlington. Students, public 
officials, and shoppers in Arlington, Texas, were taking cover April 3 as a large 
tornado touched ground, part of a huge complex of storms that was wreaking 
havoc across North Texas. The Parks at Arlington mall was shut down and 
management ordered shoppers and others into the basement. Employees at 
Cowboys Stadium were moved into the tunnels. Damage was also reported at 
nearby apartments. The Arlington Fire Department reported heavy damage near 
Lake Arlington and damage to the Green Oaks Nursing Home. Dallas/Fort Worth 
Airport told passengers to move away from glass windows and to take cover in its 
storm shelters. The Federal Aviation Administration also issued a ground stop for 
flights coming in and out of the airport. The first tornado was spotted near Joshua, 
causing damage according to a county sheriff’s department officer. Students in 
Burleson and Arlington were moved to safety zones. The National Weather 
Service said a tornado touched down in Kennedale, and media reported “extreme 
damage.” A funnel touched down about 2 miles east of Spinks Airport in south 
Tarrant County without causing damage, according to the airport manager. A 
second tornado warning was issued for Dallas and Ellis counties after a tornado 
was confirmed on the ground in Ellis County. A tornado near Lancaster in Dallas 
County reportedly caused power flashes and sent debris flying. 

Source: http://www.star-telegram.com/2012/04/03/3856093/rainstorms-expected- 
in-dfw-by.html 



41. April 3, KSWB 5 San Diego - (California) Church fire causes $1M in 
damage. A fire broke out at the offices of a Kearny Mesa, California church April 
2, causing an estimated $1 million in damage, but no one was hurt, authorities 
said. The structure houses the church’s office but its Sunday services are held at 
Kearny Mesa High School, according to the church’s Web site. The cause of the 
fire was under investigation. 

Source: http://www.fox5sandiego.com/news/kswb-flood-church-church-fire- 
causes-lm-in-damage-in-keamy- mesa-201 20403,0, 1649260.story 

42. April 3, Fond du Lac Reporter - (Wisconsin) Man suffers extensive burns in 
downtown Fond du Lac apartment fire. A man suffered extensive bums and 
smoke inhalation, and a business was a loss, following a fire at a second-story 
apartment in Fond du Lac, Wisconsin, April 3. More than 100 firefighters from 14 
departments responded to assist. A fire prevention officer said JJC Interiors, 
located under the apartment, was a loss. The second-story floor collapsed onto the 
business in addition to smoke and water damage. A neighboring Gallery&Frame 
Shop likely sustained smoke damage, according to the fire prevention officer. 
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Source: 

http://www.postcrescent.com/article/20 1 20403/APC0 1 01/3040400 1 2/Fond-du- 

Lac-fire-downtown-apartment-man- 

burned?odyssev=tabltopnewsltextlFRQNTPAGE 

43. April 2, LongBranch-Eatontown Patch - (New Jersey) Fire, gas leak prompt 
evacuation at W. Long Branch Shop Rite. A gas leak and fire caused 
authorities to evacuate a Shop Rite store in West Long Branch, New Jersey, April 
2. A gas leak was reported and fire department personnel were called to the scene 
for a fire in the bakery area of the store. The fire was extinguished, but fire crews 
remained on the scene and were on the roof of the store to check for extension. 
The store remained closed April 2 as fire crews continued operations. 

Source: http://longbranch.patch.com/articles/fire-gas-leak-causes-evacuation-of- 
west-long-branch-shop-rite 

44. April 2, WDAM 7 Laurel - (Mississippi) Five shot at Hattiesburg restaurant, 
HPD makes arrest. Police have arrested a man and charged him with five counts 
aggravated assault after allegedly shooting several people at a Cuco’s restaurant 
in Hattiesburg, Mississippi, April 2. The injured were transported to a local 
hospital where three were listed in critical condition. An employee chased the 
shooter out of the restaurant and kept the suspect in view until police apprehended 
him. 

Source: http : //www. wdam.com/story/ 173147 60/four-shot-at-hattiesburg- 
restaurant-suspect-in-custody 

For another story, see item 18 
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National Monuments and Icons Sector 

Nothing to report 
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Dams Sector 



45. April 3, Dredging Today - (North Dakota) Army Corps, Valley City begin flood 
risk management study. The U.S. Army Corps of Engineers in both Valley City, 
North Dakota, and Saint Paul District, Minnesota, entered into a formal agreement 
to partner in a flood risk management study, Dredging Today reported April 3. 

The Valley City, Sheyenne River Flood Risk Management Feasibility Study will 
identify measures to reduce average annual flood damages and to reduce flood- 
related risks to public safety in Valley City. The study partners will evaluate 
alternatives for flood damage reduction and flood risk management. The study 
plans to identify an implementable project that will reduce the overall risk of 
flooding. The study will be developed in coordination with the public and a 
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number of local, state, and federal agencies. The complete study is estimated to 
cost $1.5 million and take 2 and a half years to complete. 

Source: http://www.dredgingtoday.com/2012/04/Q3/army-corps-valley-citv- 
begin-flood-risk-management-study-usa/ 

46. April 2, Billings Gazzette - (Montana) Western Sugar pays $20,000 fine for 
clean water violations. The State Department of Environmental Quality officials 
declared Western Sugar Cooperative pay a $20,000 fine April 1 for water quality 
violations stemming from a 15-million gallon holding pond breach that flooded 
south Billings, Montana, in 2011. The agency said Western was taking steps to 
better handle water from its Billings sugar refinery. Farmer-owned Western 
refines sugar from beets. For decades, the extracted water was discarded without 
incident into above ground holding ponds at the State Avenue refinery. However, 
a portion of the holding pond wall collapsed January 2, 2011, flooding 
neighboring properties and sending millions of gallons of beet water into a ditch 
feeding the Yellowstone River. Months of cleanup of gray foul-smelling sludge 
followed. 

Source: http://billingsgazette.com/news/state-and-regional/montana/western- 
sugar-pays-fine-for-clean-water- violations/article 4f4d7141-e221-57ad-ad77- 
fad08d62cl92.html 



47. April 2, WALB 10 Albany - (Georgia) Georgia Dam explosive device suspect 
released on bond. A man caught with explosives near the Georgia Power Dam in 
Albany, Georgia, April 1, was released on bond the following day. The man was 
arrested after police got a tip that someone had explosives near the dam. 
Dougherty County Police found five explosive devices in the man’s car. The 
Dougherty County police captain said, “Right now we don’t have anything to 
indicate that he is some kind of terrorist, but we really don’t know for sure, and 
that’s why we are continuing to look into him and his background.” Samples of 
the explosive device and the chemicals used were sent to the FBI while the rest 
were destroyed by the Georgia Bureau of Investigation. 

Source: http ://w w w . walb .com/story/ 173 1 48 84/georgia-dam-explosive-device- 
suspect-released-on-bond 
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